Everything worth knowing, nothing that isn't.
What it actually does
The SM-DP+ takes a profile template from the operator (IMSI, Ki, OPc, OTA keys, file system, applets), personalises it for a specific eUICC by EID, signs it with the operator's profile signing key, and serves it over an ES9+ HTTPS endpoint to the device's Local Profile Assistant (LPA). The device authenticates the SM-DP+ using GSMA-rooted certificates (the CI root), pulls the profile, and the eUICC installs it into a new Issuer Security Domain — Profile (ISD-P). The whole exchange is mutually authenticated, integrity-protected, and bound to the EID so a profile cannot be installed on the wrong device.
Why it matters commercially
SM-DP+ is the line in the sand between operators who can issue eSIMs and operators who cannot. Without an SM-DP+ — your own, or rented from a trusted vendor — there is no consumer eSIM business. The SM-DP+ vendor holds operator keys, so the choice is a long-term trust decision: a GSMA SAS-SM-accredited vendor (BroadNet's own SAS-SM accreditation is in progress) is the minimum bar for tier-1 operator relationships, and most operators audit their SM-DP+ vendor annually.
Latency, scale, and compliance angle
A modern SM-DP+ profile-download takes 4-15 seconds end-to-end on a healthy mobile data connection. BroadNet's SM-DP+ sustains 10,000-100,000+ profile generations per day per operator tenant, with HSM-backed signing and an end-to-end audit trail (every profile request, every CI certificate validation, every install confirmation). Compliance is governed by GSMA SAS-SM with biennial unannounced audits; a single key-ceremony deviation can suspend the certification and pause all profile downloads.
Privacy and compliance considerations
The SM-DP+ sees the EID, the IMSI, the device IMEI on activation, and any operator-specific metadata (subscription plan, MSISDN once allocated). Data residency rules apply — KSA PDPL requires KSA-subscriber profiles to be prepared inside the kingdom; EU GDPR requires SCCs or adequacy for cross-border preparation. BroadNet's eSIM VSM platform (/operators/esim-vsm) is operable in single-tenant on-prem mode for operators that need full data residency, or multi-tenant managed mode for MVNOs and IoT providers.